The cyber threat is not just external. Do not assume that once a visitor walks through the front door of the building that they are a neutral. I have seen cases where a visitor comes in for a meeting with a company only to leave a USB thumb drive with a virus or key logging software, which takes individual key presses and transmits them to a server on the outside. As a result every time an employee logs in her user ID her password can be captured.